Infos

The parent task #2675740: User can edit content but not submit introduced a wrong (or by now outdated) name for the 'moderation_state' field, that is attached to nodes.
As a result, the hook_entity_access()' implementation fails to block users that are not allowed to start a transition from the current state of the node from accessing the node during 'update' kind of actions (e.g. accessing the edit form)

Solution

Replace $entity->moderation_information with $entity->moderation_state

More info

+ workbench_moderation_node_access()
+ Drupal\workbench_moderation\EntityTypeInfo::entityBaseFieldInfo()

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

stefanos.petrakis created an issue. See original summary.

stefanos.petrakis@gmail.com’s picture

And the patch for that